CVE-2023-0882

概要

参考情報

• docs.krontech.com/singleconnect-2-16/update-patch-rdp-proxy-idor-vulnerability · Patch
• siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0092
• usom.gov.tr/bildirim/tr-23-0092 · Broken Link

single connect のその他の脆弱性

• CVE-2021-44795中 5.3Single Connect does not perform an authorization check when using the "sc-assigned-credential-ui" module. A remote attacker could exploit th…
• CVE-2021-44794中 5.3Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module. A remote attacker could exploit this vulner…
• CVE-2021-44793高 8.6Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exploit this vulnerabil…
• CVE-2021-44792中 5.3Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could exploit this vulnerabili…